<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Panorama - HA - Last primary-suspended state reason: User requested in Panorama Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/panorama-discussions/panorama-ha-last-primary-suspended-state-reason-user-requested/m-p/1227251#M2852</link>
    <description>&lt;P&gt;Good Day&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I just tried an HA failover and you are correct, there is no user tied to who issued the command.&lt;/P&gt;
&lt;P&gt;You could best determine the log time of when the device went from active to suspended and cross-check with the admin user logged in before/during the HA event.&lt;BR /&gt;There would be a logical inference that this logged in user requested the action.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="SCantwell_0-1745429507440.png" style="width: 659px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/67249i44C049B9F31656AA/image-dimensions/659x56?v=v2" width="659" height="56" role="button" title="SCantwell_0-1745429507440.png" alt="SCantwell_0-1745429507440.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 23 Apr 2025 17:32:40 GMT</pubDate>
    <dc:creator>S.Cantwell</dc:creator>
    <dc:date>2025-04-23T17:32:40Z</dc:date>
    <item>
      <title>Panorama - HA - Last primary-suspended state reason: User requested</title>
      <link>https://live.paloaltonetworks.com/t5/panorama-discussions/panorama-ha-last-primary-suspended-state-reason-user-requested/m-p/1227119#M2850</link>
      <description>&lt;P&gt;Hey Guys,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I am trying to find out why would Panorama HA switch would happen. From the out of "show high-availability state" I see that the switch was requested by a user. However, I am trying to get the logs to understand which user actually requested it. I cannot see this information in Monitor &amp;gt; config nor on Monitor &amp;gt; system.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Can someone guide me in finding out the log that shows the name of the user who requested the suspension?&lt;/P&gt;</description>
      <pubDate>Tue, 22 Apr 2025 13:10:42 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/panorama-discussions/panorama-ha-last-primary-suspended-state-reason-user-requested/m-p/1227119#M2850</guid>
      <dc:creator>Balram-Vakil</dc:creator>
      <dc:date>2025-04-22T13:10:42Z</dc:date>
    </item>
    <item>
      <title>Re: Panorama - HA - Last primary-suspended state reason: User requested</title>
      <link>https://live.paloaltonetworks.com/t5/panorama-discussions/panorama-ha-last-primary-suspended-state-reason-user-requested/m-p/1227251#M2852</link>
      <description>&lt;P&gt;Good Day&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I just tried an HA failover and you are correct, there is no user tied to who issued the command.&lt;/P&gt;
&lt;P&gt;You could best determine the log time of when the device went from active to suspended and cross-check with the admin user logged in before/during the HA event.&lt;BR /&gt;There would be a logical inference that this logged in user requested the action.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="SCantwell_0-1745429507440.png" style="width: 659px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/67249i44C049B9F31656AA/image-dimensions/659x56?v=v2" width="659" height="56" role="button" title="SCantwell_0-1745429507440.png" alt="SCantwell_0-1745429507440.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 23 Apr 2025 17:32:40 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/panorama-discussions/panorama-ha-last-primary-suspended-state-reason-user-requested/m-p/1227251#M2852</guid>
      <dc:creator>S.Cantwell</dc:creator>
      <dc:date>2025-04-23T17:32:40Z</dc:date>
    </item>
    <item>
      <title>Re: Panorama - HA - Last primary-suspended state reason: User requested</title>
      <link>https://live.paloaltonetworks.com/t5/panorama-discussions/panorama-ha-last-primary-suspended-state-reason-user-requested/m-p/1227286#M2853</link>
      <description>&lt;P&gt;Thanks for helping out. I did think the same. Although, I feel a simple log would have made this easier.&lt;/P&gt;</description>
      <pubDate>Thu, 24 Apr 2025 03:30:43 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/panorama-discussions/panorama-ha-last-primary-suspended-state-reason-user-requested/m-p/1227286#M2853</guid>
      <dc:creator>Balram-Vakil</dc:creator>
      <dc:date>2025-04-24T03:30:43Z</dc:date>
    </item>
  </channel>
</rss>

